04134c64a73c60df6376fb536a81d8bf81b635b8743d892d0c0ed575229afd3d

General

Target
04134c64a73c60df6376fb536a81d8bf81b635b8743d892d0c0ed575229afd3d
Size 807KB
Sample240523-p9tkjabe6w
SHA256 04134c64a73c60df6376fb536a81d8bf81b635b8743d892d0c0ed575229afd3d
MD5 5c194a368d60360bd2ad862a93f2fca2
SHA1 f335b5c5ae86a6aca55a6465bb3a97e217d042b1
SHA512 10385d3f7ee57137b1356b80c824bdb60edb0807686cf3e627629e1ca6d952805bb04904af68b1a7410c43583fa64872becb7f4b2d01cfe41c442a252a29b64c
SSDEEP 12288:OI8Rax/zOWHvw9Z4ogV/1niAnx87xywFpP+Tib9Rdv7cx0qQoYd3pSmItVZLq:tsWPe3gV/1i4AxywMib9fHpRU5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04134c64a73c60df6376fb536a81d8bf81b635b8743d892d0c0ed575229afd3d

File Explorer

04134c64a73c60df6376fb536a81d8bf81b635b8743d892d0c0ed575229afd3d

.exe 807KB

04134c64a73c60df6376fb536a81d8bf81b635b8743d892d0c0ed575229afd3d

IMPHASH b7291f89ce42f71fa55cdb0abc82d450
SHA256 04134c64a73c60df6376fb536a81d8bf81b635b8743d892d0c0ed575229afd3d
MD5 5c194a368d60360bd2ad862a93f2fca2
SHA1 f335b5c5ae86a6aca55a6465bb3a97e217d042b1
SHA512 10385d3f7ee57137b1356b80c824bdb60edb0807686cf3e627629e1ca6d952805bb04904af68b1a7410c43583fa64872becb7f4b2d01cfe41c442a252a29b64c
SSDEEP 12288:OI8Rax/zOWHvw9Z4ogV/1niAnx87xywFpP+Tib9Rdv7cx0qQoYd3pSmItVZLq:tsWPe3gV/1i4AxywMib9fHpRU5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9281

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetErrorMode CompareFileTime SetDefaultCommConfigW SetConsoleScreenBufferSize FlushConsoleInputBuffer SleepEx FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesA ReadConsoleOutputA EnumTimeFormatsA ActivateActCtx GlobalAlloc GetCalendarInfoA GetVersionExW FindNextVolumeW GetFileAttributesW GetModuleFileNameW SetConsoleTitleA GetShortPathNameA InterlockedExchange GetCurrentDirectoryW SetLastError GetProcAddress BuildCommDCBW LoadLibraryA WriteConsoleA UnhandledExceptionFilter SetCalendarInfoW FindNextChangeNotification HeapLock EnumDateFormatsA CompareStringA DeleteCriticalSection InterlockedPushEntrySList CommConfigDialogW GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

04134c64a73c60df6376fb536a81d8bf81b635b8743d892d0c0ed575229afd3d

kernel32

generic